Signal is the gold standard for private messaging, but installing the app alone doesn't make you private. Several default settings leak metadata or leave data accessible. This guide walks you through every toggle that matters.
Settings → Account → Registration Lock. Turn it on. This prevents someone from re-registering your phone number on a new device without your PIN — protecting against SIM-swap attacks.
Settings → Chats → Generate Link Previews → off. Link previews cause Signal to fetch a preview from the destination server, exposing your IP address. Disabling this prevents that metadata leak.
Settings → Privacy → Default Timer for New Chats. Set to 1 week as a starting point. Every new conversation auto-deletes after that period. Override per-conversation as needed.
Settings → Privacy → Show Calls in Recents → off. When enabled, Signal calls appear in your phone's regular call log where any app with call log permissions can see them.
Settings → Privacy → Screen Security → on. This prevents Signal from appearing in your app switcher and blocks screenshots inside the app on Android.
Open a conversation → tap their name → View Safety Number. Compare the numbers with your contact in person or over a trusted channel. If they match, tap "Mark as Verified." This confirms you're not being man-in-the-middled.
Settings → Privacy → Advanced → Always Relay Calls → on. Direct peer-to-peer calls can expose your IP address. Relaying through Signal's servers hides your IP from the other party.
Settings → Privacy → Read Receipts → off. Read receipts reveal your activity patterns and when you're paying attention to your phone. Senders will see "Delivered" but not "Read."
Settings → Privacy → Incognito Keyboard (Android). This requests that your keyboard stops learning from what you type in Signal. Many keyboards send everything to the cloud for prediction improvement.
Settings → Linked Devices. If you see any device you don't recognize, unlink it immediately. An attacker who briefly accessed your phone could have linked their own device. Check monthly.
If you're configuring Signal for a high-risk situation — stalking, journalism, activism, or leaving an abusive relationship — we can walk you through additional operational security measures tailored to your threat model.